Analysis

  • max time kernel
    1s
  • max time network
    4s
  • platform
    macos-10.15_amd64
  • resource
    macos-20240711.1-en
  • resource tags

    arch:amd64arch:i386image:macos-20240711.1-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
  • submitted
    18/08/2024, 10:55

General

  • Target

    Payload/TrollInstallerX.app/TrollStore.gz

  • Size

    2.3MB

  • MD5

    7538e3e267e7b3e7c1e45b91c4b282aa

  • SHA1

    f893740a667d94cdaf7e5f72a947e57b891512f1

  • SHA256

    6ab772d1c4ec0b6ced3e4a5dae6602114fcf829dabf64a252b060e5a82100db5

  • SHA512

    a4c5123d263e4295aed90fc736ff2d1ae2d210647e7c28d410ecfdd63c71cd589ff33d1237f88051b455a7a0357d9c04f7f984fd23b0d575844481c475f48464

  • SSDEEP

    49152:HsHHuxJmG1FR0DCi5crnSaxvxuC6UDJXJ64GitlCpsV7JL:HsHHuxEGNni5UnSa5zNDJI4Gi/C2J

Score
1/10

Malware Config

Signatures

Processes

  • /bin/sh
    sh -c "sudo /bin/zsh -c \"/Users/run/Payload/TrollInstallerX.app/TrollStore.gz\""
    1⤵
      PID:479
    • /bin/bash
      sh -c "sudo /bin/zsh -c \"/Users/run/Payload/TrollInstallerX.app/TrollStore.gz\""
      1⤵
        PID:479
      • /usr/bin/sudo
        sudo /bin/zsh -c /Users/run/Payload/TrollInstallerX.app/TrollStore.gz
        1⤵
          PID:479
          • /bin/zsh
            /bin/zsh -c /Users/run/Payload/TrollInstallerX.app/TrollStore.gz
            2⤵
              PID:480
            • /Users/run/Payload/TrollInstallerX.app/TrollStore.gz
              /Users/run/Payload/TrollInstallerX.app/TrollStore.gz
              2⤵
                PID:480

            Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads